Warning: Permanently added '10.128.1.210' (ED25519) to the list of known hosts.
2025/10/23 18:51:16 parsed 1 programs
[ 91.216717][ T5830] cgroup: Unknown subsys name 'net'
[ 91.367907][ T5830] cgroup: Unknown subsys name 'cpuset'
[ 91.377190][ T5830] cgroup: Unknown subsys name 'rlimit'
[ 91.795489][ T1599] cfg80211: failed to load regulatory.db
[ 93.050490][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 96.146956][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 97.751532][ T5872] chnl_net:caif_netlink_parms(): no params data found
[ 97.845227][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.852926][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.861155][ T5872] bridge_slave_0: entered allmulticast mode
[ 97.868686][ T5872] bridge_slave_0: entered promiscuous mode
[ 97.877668][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.884981][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.892160][ T5872] bridge_slave_1: entered allmulticast mode
[ 97.899702][ T5872] bridge_slave_1: entered promiscuous mode
[ 97.934548][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.946944][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.980340][ T5872] team0: Port device team_slave_0 added
[ 97.990294][ T5872] team0: Port device team_slave_1 added
[ 98.019165][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.026631][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.052553][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.065749][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.072718][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.098657][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.146814][ T5872] hsr_slave_0: entered promiscuous mode
[ 98.153331][ T5872] hsr_slave_1: entered promiscuous mode
[ 98.310317][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.322261][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.333620][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.345664][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.377504][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.384935][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.392749][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.400103][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.460732][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.480347][ T65] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.489183][ T65] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.507150][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.521669][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.528838][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.541706][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.548894][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.736629][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.781290][ T5872] veth0_vlan: entered promiscuous mode
[ 98.795989][ T5872] veth1_vlan: entered promiscuous mode
[ 98.828562][ T5872] veth0_macvtap: entered promiscuous mode
[ 98.842075][ T5872] veth1_macvtap: entered promiscuous mode
[ 98.862934][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.877784][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.892219][ T3525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.901837][ T3525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.914040][ T3525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.922790][ T3525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.057592][ T3525] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.130063][ T3525] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.196107][ T3525] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.223491][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.236218][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.266041][ T3525] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.299710][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.308733][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.659734][ T5908] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.668078][ T5908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.676004][ T5908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.686428][ T5908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.694389][ T5908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/10/23 18:51:29 executed programs: 0
[ 101.342077][ T5908] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 101.350089][ T5908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 101.358705][ T5908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 101.366873][ T5908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 101.375510][ T5908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 101.573281][ T3525] bridge_slave_1: left allmulticast mode
[ 101.579876][ T3525] bridge_slave_1: left promiscuous mode
[ 101.586235][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.597627][ T3525] bridge_slave_0: left allmulticast mode
[ 101.603284][ T3525] bridge_slave_0: left promiscuous mode
[ 101.609120][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.861252][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 101.872526][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 101.882909][ T3525] bond0 (unregistering): Released all slaves
[ 101.972541][ T5938] chnl_net:caif_netlink_parms(): no params data found
[ 102.008260][ T3525] hsr_slave_0: left promiscuous mode
[ 102.015445][ T3525] hsr_slave_1: left promiscuous mode
[ 102.021892][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.029451][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.038195][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.045897][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.070798][ T3525] veth1_macvtap: left promiscuous mode
[ 102.076802][ T3525] veth0_macvtap: left promiscuous mode
[ 102.082946][ T3525] veth1_vlan: left promiscuous mode
[ 102.088881][ T3525] veth0_vlan: left promiscuous mode
[ 102.550307][ T3525] team0 (unregistering): Port device team_slave_1 removed
[ 102.581429][ T3525] team0 (unregistering): Port device team_slave_0 removed
[ 102.991677][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.004118][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.011390][ T5938] bridge_slave_0: entered allmulticast mode
[ 103.025377][ T5938] bridge_slave_0: entered promiscuous mode
[ 103.041181][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.048531][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.056248][ T5938] bridge_slave_1: entered allmulticast mode
[ 103.074766][ T5938] bridge_slave_1: entered promiscuous mode
[ 103.198290][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 103.235196][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.358227][ T5938] team0: Port device team_slave_0 added
[ 103.377486][ T5938] team0: Port device team_slave_1 added
[ 103.398042][ T5908] Bluetooth: hci0: command tx timeout
[ 103.441274][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.448341][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.474915][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.488422][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.496779][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.523912][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.937790][ T5938] hsr_slave_0: entered promiscuous mode
[ 103.945445][ T5938] hsr_slave_1: entered promiscuous mode
[ 104.660133][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.673649][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.703516][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.721221][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.864703][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.896067][ T5938] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.908966][ T200] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.916208][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.936246][ T200] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.943457][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.238823][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.300793][ T5938] veth0_vlan: entered promiscuous mode
[ 105.319132][ T5938] veth1_vlan: entered promiscuous mode
[ 105.365903][ T5938] veth0_macvtap: entered promiscuous mode
[ 105.378919][ T5938] veth1_macvtap: entered promiscuous mode
[ 105.408224][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.423447][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.449862][ T3525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.465787][ T3525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.475575][ T5908] Bluetooth: hci0: command tx timeout
[ 105.476285][ T3525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.492587][ T3525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.578392][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.593032][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.627347][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.636129][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.700435][ T6023] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 105.731005][ T6023] FAULT_INJECTION: forcing a failure.
[ 105.731005][ T6023] name failslab, interval 1, probability 0, space 0, times 1
[ 105.745101][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 105.745126][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 105.745146][ T6023] Call Trace:
[ 105.745154][ T6023]
[ 105.745162][ T6023] dump_stack_lvl+0x189/0x250
[ 105.745198][ T6023] ? __pfx____ratelimit+0x10/0x10
[ 105.745220][ T6023] ? __pfx_dump_stack_lvl+0x10/0x10
[ 105.745243][ T6023] ? __pfx__printk+0x10/0x10
[ 105.745271][ T6023] ? __pfx___might_resched+0x10/0x10
[ 105.745300][ T6023] ? fs_reclaim_acquire+0x7d/0x100
[ 105.745334][ T6023] should_fail_ex+0x414/0x560
[ 105.745362][ T6023] should_failslab+0xa8/0x100
[ 105.745395][ T6023] __kmalloc_cache_node_noprof+0x88/0x6f0
[ 105.745424][ T6023] ? __get_vm_area_node+0x13f/0x300
[ 105.745454][ T6023] __get_vm_area_node+0x13f/0x300
[ 105.745483][ T6023] __vmalloc_node_range_noprof+0x32d/0x1470
[ 105.745512][ T6023] ? kvm_arch_prepare_memory_region+0x33b/0xed0
[ 105.745533][ T6023] ? __lock_acquire+0xab9/0xd20
[ 105.745586][ T6023] ? rcu_is_watching+0x15/0xb0
[ 105.745607][ T6023] ? trace_contention_end+0x39/0x120
[ 105.745633][ T6023] ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 105.745677][ T6023] ? kvm_arch_prepare_memory_region+0x33b/0xed0
[ 105.745696][ T6023] __vmalloc_noprof+0xb1/0xf0
[ 105.745722][ T6023] ? kvm_arch_prepare_memory_region+0x33b/0xed0
[ 105.745746][ T6023] kvm_arch_prepare_memory_region+0x33b/0xed0
[ 105.745772][ T6023] ? kvm_gmem_bind+0x21d/0x490
[ 105.745799][ T6023] kvm_set_memslot+0x599/0x1310
[ 105.745820][ T6023] ? kvm_check_memslot_overlap+0x301/0x380
[ 105.745839][ T6023] ? kvm_set_memory_region+0x747/0xb90
[ 105.745867][ T6023] kvm_set_memory_region+0x966/0xb90
[ 105.745903][ T6023] kvm_vm_ioctl_set_memory_region+0x6f/0xd0
[ 105.745926][ T6023] kvm_vm_ioctl+0x957/0xc60
[ 105.745949][ T6023] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 105.746007][ T6023] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 105.746043][ T6023] ? do_vfs_ioctl+0xbe8/0x1430
[ 105.746071][ T6023] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 105.746101][ T6023] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 105.746170][ T6023] ? __fget_files+0x2a/0x420
[ 105.746200][ T6023] ? __fget_files+0x3a0/0x420
[ 105.746222][ T6023] ? __fget_files+0x2a/0x420
[ 105.746249][ T6023] ? bpf_lsm_file_ioctl+0x9/0x20
[ 105.746270][ T6023] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 105.746298][ T6023] __se_sys_ioctl+0xfc/0x170
[ 105.746332][ T6023] do_syscall_64+0xfa/0xfa0
[ 105.746355][ T6023] ? lockdep_hardirqs_on+0x9c/0x150
[ 105.746378][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.746398][ T6023] ? clear_bhb_loop+0x60/0xb0
[ 105.746423][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.746442][ T6023] RIP: 0033:0x7fbeeff8efc9
[ 105.746468][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 105.746484][ T6023] RSP: 002b:00007fbef0df4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 105.746507][ T6023] RAX: ffffffffffffffda RBX: 00007fbef01e5fa0 RCX: 00007fbeeff8efc9
[ 105.746522][ T6023] RDX: 0000200000000180 RSI: 0000000040a0ae49 RDI: 0000000000000004
[ 105.746535][ T6023] RBP: 00007fbef0df4090 R08: 0000000000000000 R09: 0000000000000000
[ 105.746547][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 105.746558][ T6023] R13: 00007fbef01e6038 R14: 00007fbef01e5fa0 R15: 00007ffffdf1e168
[ 105.746592][ T6023]
[ 105.746735][ T6023] syz.0.17: vmalloc error: size 4, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 106.101211][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 106.101236][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 106.101248][ T6023] Call Trace:
[ 106.101256][ T6023]
[ 106.101264][ T6023] dump_stack_lvl+0x189/0x250
[ 106.101298][ T6023] ? __pfx_dump_stack_lvl+0x10/0x10
[ 106.101323][ T6023] ? __pfx__printk+0x10/0x10
[ 106.101347][ T6023] ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 106.101373][ T6023] ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 106.101401][ T6023] ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 106.101430][ T6023] warn_alloc+0x214/0x310
[ 106.101466][ T6023] ? __pfx_warn_alloc+0x10/0x10
[ 106.101497][ T6023] ? __get_vm_area_node+0x13f/0x300
[ 106.101528][ T6023] ? __get_vm_area_node+0x2b5/0x300
[ 106.101562][ T6023] __vmalloc_node_range_noprof+0x352/0x1470
[ 106.101590][ T6023] ? __lock_acquire+0xab9/0xd20
[ 106.101644][ T6023] ? rcu_is_watching+0x15/0xb0
[ 106.101666][ T6023] ? trace_contention_end+0x39/0x120
[ 106.101692][ T6023] ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 106.101736][ T6023] ? kvm_arch_prepare_memory_region+0x33b/0xed0
[ 106.101766][ T6023] __vmalloc_noprof+0xb1/0xf0
[ 106.101793][ T6023] ? kvm_arch_prepare_memory_region+0x33b/0xed0
[ 106.101817][ T6023] kvm_arch_prepare_memory_region+0x33b/0xed0
[ 106.101844][ T6023] ? kvm_gmem_bind+0x21d/0x490
[ 106.101883][ T6023] kvm_set_memslot+0x599/0x1310
[ 106.101903][ T6023] ? kvm_check_memslot_overlap+0x301/0x380
[ 106.101922][ T6023] ? kvm_set_memory_region+0x747/0xb90
[ 106.101950][ T6023] kvm_set_memory_region+0x966/0xb90
[ 106.101984][ T6023] kvm_vm_ioctl_set_memory_region+0x6f/0xd0
[ 106.102008][ T6023] kvm_vm_ioctl+0x957/0xc60
[ 106.102038][ T6023] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 106.102114][ T6023] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 106.102152][ T6023] ? do_vfs_ioctl+0xbe8/0x1430
[ 106.102182][ T6023] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 106.102214][ T6023] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 106.102287][ T6023] ? __fget_files+0x2a/0x420
[ 106.102317][ T6023] ? __fget_files+0x3a0/0x420
[ 106.102339][ T6023] ? __fget_files+0x2a/0x420
[ 106.102366][ T6023] ? bpf_lsm_file_ioctl+0x9/0x20
[ 106.102387][ T6023] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 106.102407][ T6023] __se_sys_ioctl+0xfc/0x170
[ 106.102440][ T6023] do_syscall_64+0xfa/0xfa0
[ 106.102463][ T6023] ? lockdep_hardirqs_on+0x9c/0x150
[ 106.102487][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.102507][ T6023] ? clear_bhb_loop+0x60/0xb0
[ 106.102532][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.102552][ T6023] RIP: 0033:0x7fbeeff8efc9
[ 106.102570][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 106.102586][ T6023] RSP: 002b:00007fbef0df4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 106.102617][ T6023] RAX: ffffffffffffffda RBX: 00007fbef01e5fa0 RCX: 00007fbeeff8efc9
[ 106.102632][ T6023] RDX: 0000200000000180 RSI: 0000000040a0ae49 RDI: 0000000000000004
[ 106.102644][ T6023] RBP: 00007fbef0df4090 R08: 0000000000000000 R09: 0000000000000000
[ 106.102673][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 106.102685][ T6023] R13: 00007fbef01e6038 R14: 00007fbef01e5fa0 R15: 00007ffffdf1e168
[ 106.102720][ T6023]
[ 106.102739][ T6023] Mem-Info:
[ 106.435912][ T6023] active_anon:39403 inactive_anon:0 isolated_anon:0
[ 106.435912][ T6023] active_file:461 inactive_file:51760 isolated_file:0
[ 106.435912][ T6023] unevictable:768 dirty:1195 writeback:0
[ 106.435912][ T6023] slab_reclaimable:10696 slab_unreclaimable:78914
[ 106.435912][ T6023] mapped:10327 shmem:1356 pagetables:873
[ 106.435912][ T6023] sec_pagetables:0 bounce:0
[ 106.435912][ T6023] kernel_misc_reclaimable:0
[ 106.435912][ T6023] free:1358477 free_pcp:25286 free_cma:0
[ 106.483159][ T6023] Node 0 active_anon:157512kB inactive_anon:0kB active_file:1844kB inactive_file:206844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:41308kB dirty:4772kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9836kB pagetables:3348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 106.520214][ T6023] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 106.580035][ T6023] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 106.619799][ T6023] lowmem_reserve[]: 0 2494 2496 2496 2496
[ 106.625812][ T6023] Node 0 DMA32 free:1525356kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:157512kB inactive_anon:0kB active_file:1844kB inactive_file:206844kB unevictable:1536kB writepending:4772kB zspages:0kB present:3129332kB managed:2554796kB mlocked:0kB bounce:0kB free_pcp:83316kB local_pcp:49940kB free_cma:0kB
[ 106.660467][ T6023] lowmem_reserve[]: 0 0 1 1 1
[ 106.665414][ T6023] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 106.696077][ T6023] lowmem_reserve[]: 0 0 0 0 0
[ 106.700861][ T6023] Node 1 Normal free:3892992kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18788kB local_pcp:11072kB free_cma:0kB
[ 106.737676][ T6023] lowmem_reserve[]: 0 0 0 0 0
[ 106.742462][ T6023] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 106.757226][ T6023] Node 0 DMA32: 1112*4kB (UE) 296*8kB (UE) 44*16kB (UE) 303*32kB (U) 43*64kB (UME) 26*128kB (UM) 23*256kB (UM) 11*512kB (UM) 15*1024kB (UME) 5*2048kB (UM) 359*4096kB (M) = 1530880kB
[ 106.775907][ T6023] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 106.787777][ T6023] Node 1 Normal: 242*4kB (UME) 57*8kB (UME) 51*16kB (UME) 30*32kB (UME) 14*64kB (UME) 8*128kB (UME) 7*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3892992kB
[ 106.806853][ T6023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 106.816863][ T6023] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 106.826740][ T6023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 106.840117][ T6023] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 106.850828][ T6023] 53572 total pagecache pages
[ 106.855848][ T6023] 0 pages in swap cache
[ 106.860073][ T6023] Free swap = 124996kB
[ 106.865371][ T6023] Total swap = 124996kB
[ 106.869954][ T6023] 2097051 pages RAM
[ 106.873781][ T6023] 0 pages HighMem/MovableOnly
[ 106.878929][ T6023] 426454 pages reserved
[ 106.883098][ T6023] 0 pages cma reserved
[ 106.889490][ T6022] ==================================================================
[ 106.897593][ T6022] BUG: KASAN: slab-use-after-free in kvm_gmem_release+0x176/0x440
[ 106.905427][ T6022] Write of size 8 at addr ffff88807befa508 by task syz.0.17/6022
[ 106.913165][ T6022]
[ 106.915516][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 106.915542][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 106.915554][ T6022] Call Trace:
[ 106.915563][ T6022]
[ 106.915571][ T6022] dump_stack_lvl+0x189/0x250
[ 106.915598][ T6022] ? __kasan_check_byte+0x12/0x40
[ 106.915629][ T6022] ? __pfx_dump_stack_lvl+0x10/0x10
[ 106.915652][ T6022] ? lock_release+0x4b/0x3e0
[ 106.915684][ T6022] ? __virt_addr_valid+0x4a5/0x5c0
[ 106.915715][ T6022] print_report+0xca/0x240
[ 106.915741][ T6022] ? kvm_gmem_release+0x176/0x440
[ 106.915761][ T6022] kasan_report+0x118/0x150
[ 106.915791][ T6022] ? kvm_gmem_release+0x176/0x440
[ 106.915816][ T6022] kvm_gmem_release+0x176/0x440
[ 106.915840][ T6022] ? __pfx_kvm_gmem_release+0x10/0x10
[ 106.915866][ T6022] ? evm_file_release+0x101/0x1e0
[ 106.915893][ T6022] ? __pfx_kvm_gmem_release+0x10/0x10
[ 106.915915][ T6022] __fput+0x44c/0xa70
[ 106.915946][ T6022] task_work_run+0x1d4/0x260
[ 106.915974][ T6022] ? __pfx_task_work_run+0x10/0x10
[ 106.916003][ T6022] ? exit_to_user_mode_loop+0x40/0x130
[ 106.916033][ T6022] exit_to_user_mode_loop+0xe9/0x130
[ 106.916068][ T6022] do_syscall_64+0x2bd/0xfa0
[ 106.916092][ T6022] ? lockdep_hardirqs_on+0x9c/0x150
[ 106.916115][ T6022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.916134][ T6022] ? clear_bhb_loop+0x60/0xb0
[ 106.916157][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.916176][ T6022] RIP: 0033:0x7fbeeff8efc9
[ 106.916194][ T6022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 106.916211][ T6022] RSP: 002b:00007ffffdf1e2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 106.916232][ T6022] RAX: 0000000000000000 RBX: 00007fbef01e7da0 RCX: 00007fbeeff8efc9
[ 106.916246][ T6022] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 106.916258][ T6022] RBP: 00007fbef01e7da0 R08: 0000000000000000 R09: 00000004fdf1e5bf
[ 106.916271][ T6022] R10: 00007fbef01e7cb0 R11: 0000000000000246 R12: 0000000000019ff7
[ 106.916284][ T6022] R13: 00007ffffdf1e3c0 R14: ffffffffffffffff R15: 00007ffffdf1e3e0
[ 106.916308][ T6022]
[ 106.916315][ T6022]
[ 107.134068][ T6022] Allocated by task 6023:
[ 107.138393][ T6022] kasan_save_track+0x3e/0x80
[ 107.143079][ T6022] __kasan_kmalloc+0x93/0xb0
[ 107.147690][ T6022] __kmalloc_cache_noprof+0x3e2/0x700
[ 107.153065][ T6022] kvm_set_memory_region+0x747/0xb90
[ 107.158356][ T6022] kvm_vm_ioctl_set_memory_region+0x6f/0xd0
[ 107.164248][ T6022] kvm_vm_ioctl+0x957/0xc60
[ 107.168750][ T6022] __se_sys_ioctl+0xfc/0x170
[ 107.173352][ T6022] do_syscall_64+0xfa/0xfa0
[ 107.177856][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.183746][ T6022]
[ 107.186071][ T6022] Freed by task 6023:
[ 107.190052][ T6022] kasan_save_track+0x3e/0x80
[ 107.194733][ T6022] kasan_save_free_info+0x46/0x50
[ 107.199757][ T6022] __kasan_slab_free+0x5c/0x80
[ 107.204528][ T6022] kfree+0x19a/0x6d0
[ 107.208425][ T6022] kvm_set_memory_region+0x9c4/0xb90
[ 107.213707][ T6022] kvm_vm_ioctl_set_memory_region+0x6f/0xd0
[ 107.219599][ T6022] kvm_vm_ioctl+0x957/0xc60
[ 107.224104][ T6022] __se_sys_ioctl+0xfc/0x170
[ 107.228702][ T6022] do_syscall_64+0xfa/0xfa0
[ 107.233209][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.239105][ T6022]
[ 107.241432][ T6022] The buggy address belongs to the object at ffff88807befa400
[ 107.241432][ T6022] which belongs to the cache kmalloc-cg-512 of size 512
[ 107.255755][ T6022] The buggy address is located 264 bytes inside of
[ 107.255755][ T6022] freed 512-byte region [ffff88807befa400, ffff88807befa600)
[ 107.269555][ T6022]
[ 107.271883][ T6022] The buggy address belongs to the physical page:
[ 107.278300][ T6022] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bef8
[ 107.287071][ T6022] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 107.295656][ T6022] memcg:ffff888077513701
[ 107.299892][ T6022] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 107.307881][ T6022] page_type: f5(slab)
[ 107.311864][ T6022] raw: 00fff00000000040 ffff88813fe30140 0000000000000000 dead000000000001
[ 107.320449][ T6022] raw: 0000000000000000 0000000000100010 00000000f5000000 ffff888077513701
[ 107.329039][ T6022] head: 00fff00000000040 ffff88813fe30140 0000000000000000 dead000000000001
[ 107.337713][ T6022] head: 0000000000000000 0000000000100010 00000000f5000000 ffff888077513701
[ 107.346388][ T6022] head: 00fff00000000002 ffffea0001efbe01 00000000ffffffff 00000000ffffffff
[ 107.355059][ T6022] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 107.363725][ T6022] page dumped because: kasan: bad access detected
[ 107.370147][ T6022] page_owner tracks the page as allocated
[ 107.375855][ T6022] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5203, tgid 5203 (udevd), ts 35020479428, free_ts 30283368313
[ 107.396611][ T6022] post_alloc_hook+0x240/0x2a0
[ 107.401388][ T6022] get_page_from_freelist+0x2365/0x2440
[ 107.406940][ T6022] __alloc_frozen_pages_noprof+0x181/0x370
[ 107.412758][ T6022] alloc_pages_mpol+0x232/0x4a0
[ 107.417615][ T6022] allocate_slab+0x96/0x3a0
[ 107.422123][ T6022] ___slab_alloc+0xe94/0x18a0
[ 107.426820][ T6022] __slab_alloc+0x65/0x100
[ 107.431234][ T6022] __kmalloc_node_track_caller_noprof+0x5d0/0x810
[ 107.437658][ T6022] kmalloc_reserve+0x136/0x290
[ 107.442428][ T6022] __alloc_skb+0x142/0x2d0
[ 107.446867][ T6022] alloc_skb_with_frags+0xca/0x890
[ 107.451984][ T6022] sock_alloc_send_pskb+0x84d/0x980
[ 107.457209][ T6022] unix_dgram_sendmsg+0x461/0x1850
[ 107.462317][ T6022] __sock_sendmsg+0x21c/0x270
[ 107.466999][ T6022] sock_write_iter+0x279/0x360
[ 107.471761][ T6022] vfs_write+0x5c9/0xb30
[ 107.476009][ T6022] page last free pid 1 tgid 1 stack trace:
[ 107.481809][ T6022] __free_frozen_pages+0xbc8/0xd30
[ 107.486951][ T6022] free_contig_range+0x1bd/0x4a0
[ 107.491903][ T6022] destroy_args+0x69/0x660
[ 107.496322][ T6022] debug_vm_pgtable+0x39f/0x3b0
[ 107.501183][ T6022] do_one_initcall+0x236/0x820
[ 107.505953][ T6022] do_initcall_level+0x104/0x190
[ 107.510895][ T6022] do_initcalls+0x59/0xa0
[ 107.515227][ T6022] kernel_init_freeable+0x334/0x4b0
[ 107.520426][ T6022] kernel_init+0x1d/0x1d0
[ 107.524762][ T6022] ret_from_fork+0x4bc/0x870
[ 107.529447][ T6022] ret_from_fork_asm+0x1a/0x30
[ 107.534220][ T6022]
[ 107.536540][ T6022] Memory state around the buggy address:
[ 107.542168][ T6022] ffff88807befa400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 107.550422][ T6022] ffff88807befa480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 107.559018][ T6022] >ffff88807befa500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 107.567077][ T6022] ^
[ 107.571404][ T6022] ffff88807befa580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 107.579463][ T6022] ffff88807befa600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.587529][ T6022] ==================================================================
[ 107.614030][ T5908] Bluetooth: hci0: command tx timeout
[ 107.646325][ T6022] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.653585][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 107.662714][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 107.672789][ T6022] Call Trace:
[ 107.676091][ T6022]
[ 107.679041][ T6022] dump_stack_lvl+0x99/0x250
[ 107.683664][ T6022] ? __asan_memcpy+0x40/0x70
[ 107.688284][ T6022] ? __pfx_dump_stack_lvl+0x10/0x10
[ 107.693513][ T6022] ? __pfx__printk+0x10/0x10
[ 107.698139][ T6022] vpanic+0x237/0x6d0
[ 107.702156][ T6022] ? __pfx_vpanic+0x10/0x10
[ 107.706970][ T6022] ? preempt_schedule+0xae/0xc0
[ 107.711850][ T6022] ? __pfx_preempt_schedule+0x10/0x10
[ 107.717255][ T6022] panic+0xb9/0xc0
[ 107.721022][ T6022] ? __pfx_panic+0x10/0x10
[ 107.725479][ T6022] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 107.731415][ T6022] ? kvm_gmem_release+0x176/0x440
[ 107.736472][ T6022] check_panic_on_warn+0x89/0xb0
[ 107.741446][ T6022] ? kvm_gmem_release+0x176/0x440
[ 107.746502][ T6022] end_report+0x78/0x160
[ 107.750781][ T6022] kasan_report+0x129/0x150
[ 107.755317][ T6022] ? kvm_gmem_release+0x176/0x440
[ 107.760373][ T6022] kvm_gmem_release+0x176/0x440
[ 107.765256][ T6022] ? __pfx_kvm_gmem_release+0x10/0x10
[ 107.770659][ T6022] ? evm_file_release+0x101/0x1e0
[ 107.775726][ T6022] ? __pfx_kvm_gmem_release+0x10/0x10
[ 107.781137][ T6022] __fput+0x44c/0xa70
[ 107.785157][ T6022] task_work_run+0x1d4/0x260
[ 107.789781][ T6022] ? __pfx_task_work_run+0x10/0x10
[ 107.794950][ T6022] ? exit_to_user_mode_loop+0x40/0x130
[ 107.800449][ T6022] exit_to_user_mode_loop+0xe9/0x130
[ 107.805777][ T6022] do_syscall_64+0x2bd/0xfa0
[ 107.810402][ T6022] ? lockdep_hardirqs_on+0x9c/0x150
[ 107.815627][ T6022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.821807][ T6022] ? clear_bhb_loop+0x60/0xb0
[ 107.826513][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.832430][ T6022] RIP: 0033:0x7fbeeff8efc9
[ 107.836869][ T6022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 107.856595][ T6022] RSP: 002b:00007ffffdf1e2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 107.865046][ T6022] RAX: 0000000000000000 RBX: 00007fbef01e7da0 RCX: 00007fbeeff8efc9
[ 107.873045][ T6022] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 107.881054][ T6022] RBP: 00007fbef01e7da0 R08: 0000000000000000 R09: 00000004fdf1e5bf
[ 107.889141][ T6022] R10: 00007fbef01e7cb0 R11: 0000000000000246 R12: 0000000000019ff7
[ 107.897146][ T6022] R13: 00007ffffdf1e3c0 R14: ffffffffffffffff R15: 00007ffffdf1e3e0
[ 107.905159][ T6022]
[ 107.908560][ T6022] Kernel Offset: disabled
[ 107.912998][ T6022] Rebooting in 86400 seconds..